Itoham Yonekyu Holdings: a group PC was likely infected with Emotet, and suspicious mail went to people who had exchanged mail with the group
On September 15 the group found that a PC had very likely been infected after an attachment in an attack mail was opened, and mail posing as employees went to past contacts.
Disclosed
2020-09-18
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
On September 15 the group found that a PC had received a mail aimed at spreading Emotet and had very likely been infected when its attachment was opened. Mail posing as group employees was sent to people who had exchanged mail with the group. [1]
Emotet reuses names, addresses and parts of past mail to send messages that look like replies. The group said it had engaged an outside specialist to examine the damage and the route of infection. [1]
Timeline
- Started, Detected 2020-09-15
- Disclosed 2020-09-18
- 3 days
Attack or cause
- Method
- [Malware]
- Impact
- [Data leak]
- Entry point
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, MeguroManufacturing
Itoham Yonekyu Holdings Inc.
Sources
- [1][Official]当社グループ従業員を騙った不審メールに関するお詫びとお知らせItoham Yonekyu Holdings · 2020-09-18